$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Ova4PznjXTdwJWnYhwCn7O9H2hc.roa File: Ova4PznjXTdwJWnYhwCn7O9H2hc.roa (raw, json) Hash identifier: ymFXuBFk+GIeQf0q6ojUgvXQHj3iTbA+jsbjpRL+2pM= Subject key identifier: 3A:F6:B8:3F:39:E3:5D:37:70:25:69:D8:87:00:A7:EC:EF:47:DA:17 Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 71 Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Ova4PznjXTdwJWnYhwCn7O9H2hc.roa Signing time: Tue 31 Mar 2026 07:37:44 +0000 ROA not before: Tue 31 Mar 2026 07:37:44 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 24295 IP address blocks: 203.95.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: Mar 31 07:37:44 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=3AF6B83F39E35D37702569D88700A7ECEF47DA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:f5:de:36:d2:b8:c5:05:be:f8:8c:0e:e8: d1:b2:12:fe:bf:59:d4:4a:ac:1a:b9:dd:e4:1a:da: 2d:33:27:99:4f:25:e2:48:e6:18:5f:3c:9e:dc:99: 1b:2c:5d:b4:b1:bf:06:cf:94:1b:05:2f:04:a2:42: 7a:52:a5:08:29:8f:9a:14:ce:92:e8:55:a5:43:9b: f7:1d:88:29:b8:1d:15:62:70:99:64:56:e2:69:f2: 75:88:8d:6b:24:b5:1e:7c:0c:30:ea:6f:bf:13:36: 81:d0:54:d0:44:99:1e:83:0e:24:24:49:91:7e:4b: e7:73:fd:44:a8:eb:c9:78:50:7b:e1:c7:d6:97:ba: 60:bb:13:88:bf:e9:cf:d2:f7:99:ab:88:52:db:19: 7e:cc:93:90:8d:f0:3b:a1:db:de:df:68:57:06:80: 44:78:f3:53:a3:3c:df:96:e1:18:77:21:25:8f:a0: 3b:e8:e7:a5:d4:c8:77:0f:2a:30:74:5f:5a:6f:3f: 92:6d:93:05:aa:e0:2d:81:7a:c6:27:8d:80:c9:69: ab:de:11:1d:2c:29:85:a4:81:16:6f:3d:53:9e:2f: f5:50:42:fa:b9:75:88:ba:e3:4f:d5:05:8c:80:8e: ba:00:a0:57:2d:1f:9a:90:9b:2c:0b:97:5c:05:de: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:B8:3F:39:E3:5D:37:70:25:69:D8:87:00:A7:EC:EF:47:DA:17 X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Ova4PznjXTdwJWnYhwCn7O9H2hc.roa sbgp-ipAddrBlock: critical IPv4: 203.95.24.0/21 Signature Algorithm: sha256WithRSAEncryption ae:f1:8d:23:f7:07:97:de:7f:d1:3f:4d:3f:c6:78:8c:e0:8c: cd:4f:0c:84:4c:ca:95:f8:22:c0:aa:b9:a5:a4:40:8c:e7:de: e1:b3:d2:37:00:9c:e3:9b:95:1e:8e:0f:0f:4d:66:9c:83:82: a3:e9:0c:5b:06:de:b5:3c:12:95:db:9c:5e:41:fe:ad:f5:20: 3c:56:2d:94:05:3b:be:aa:9a:41:13:83:e9:59:c0:cb:ae:5e: 47:cf:d4:f6:bb:78:4d:5e:cb:d4:3b:b5:9f:45:d0:b1:f5:0c: 34:95:ed:59:c6:22:53:95:d2:da:09:45:78:fc:8a:b7:28:65: c3:15:77:4e:c3:e1:31:5f:6e:fc:02:2b:c2:a2:8c:75:84:ae: 37:4e:d0:7f:2f:c4:74:5e:02:eb:c2:b0:10:37:54:2e:8f:9a: 77:9e:11:ce:96:5e:f2:49:67:d8:03:b1:cf:2a:ee:46:21:2c: 94:b7:77:b0:65:8d:b3:f6:4d:08:d3:8c:dd:36:54:ba:5b:74: d8:eb:40:f4:26:ae:bb:b5:03:b5:94:67:68:5b:32:1c:92:07: fc:09:eb:15:cd:ff:b6:b9:03:88:ac:cd:ad:2a:cd:2d:9b:c7: 68:aa:c8:4a:06:8d:63:cb:a7:25:f8:e8:a6:ad:45:42:51:31: ac:f7:69:dd -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI2MDMzMTA3 Mzc0NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoM0FGNkI4M0YzOUUzNUQz NzcwMjU2OUQ4ODcwMEE3RUNFRjQ3REExNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN6R9d420rjFBb74jA7o0bIS/r9Z1EqsGrnd5BraLTMnmU8l4kjm GF88ntyZGyxdtLG/Bs+UGwUvBKJCelKlCCmPmhTOkuhVpUOb9x2IKbgdFWJwmWRW 4mnydYiNayS1HnwMMOpvvxM2gdBU0ESZHoMOJCRJkX5L53P9RKjryXhQe+HH1pe6 YLsTiL/pz9L3mauIUtsZfsyTkI3wO6Hb3t9oVwaARHjzU6M835bhGHchJY+gO+jn pdTIdw8qMHRfWm8/km2TBargLYF6xieNgMlpq94RHSwphaSBFm89U54v9VBC+rl1 iLrjT9UFjICOugCgVy0fmpCbLAuXXAXeCNsCAwEAAaOCAd0wggHZMB0GA1UdDgQW BBQ69rg/OeNdN3AladiHAKfs70faFzAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzEwNjAyL092YTRQem5qWFRkd0pXbllod0NuN085SDJoYy5yb2Ew HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPLXxgwDQYJKoZIhvcNAQELBQAD ggEBAK7xjSP3B5fef9E/TT/GeIzgjM1PDIRMypX4IsCquaWkQIzn3uGz0jcAnOOb lR6ODw9NZpyDgqPpDFsG3rU8EpXbnF5B/q31IDxWLZQFO76qmkETg+lZwMuuXkfP 1Pa7eE1ey9Q7tZ9F0LH1DDSV7VnGIlOV0toJRXj8ircoZcMVd07D4TFfbvwCK8Ki jHWErjdO0H8vxHReAuvCsBA3VC6PmneeEc6WXvJJZ9gDsc8q7kYhLJS3d7BljbP2 TQjTjN02VLpbdNjrQPQmrru1A7WUZ2hbMhySB/wJ6xXN/7a5A4isza0qzS2bx2iq yEoGjWPLpyX46KatRUJRMaz3ad0= -----END CERTIFICATE-----Generated at Mon Apr 13 02:20:34 2026 by rpki-client